Yayın tarihine göre
Temmuz 2026: sömürülen ve yeni ciddi CVE kayıtları
1.301 kayıt · 21 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 11 / 14
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2026-17971İstismar yok | Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of boundsgoogle · chrome · CWE-125 | Yüksek8,8 | — | %0,3 | 29 Tem 2026 |
30İzleyin | CVE-2026-17979İstismar yok | Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pgoogle · chrome · CWE-362 | Yüksek7,5 | — | %0,2 | 29 Tem 2026 |
38İzleyin | CVE-2026-17987İstismar yok | Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had comprogoogle · chrome · CWE-20 | Kritik9,6 | — | %0,3 | 29 Tem 2026 |
35İzleyin | CVE-2026-17989İstismar yok | Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafgoogle · chrome · CWE-843 | Yüksek8,8 | — | %0,4 | 29 Tem 2026 |
38İzleyin | CVE-2026-17990İstismar yok | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromisedgoogle · chrome · CWE-20 | Kritik9,6 | — | %0,3 | 29 Tem 2026 |
38İzleyin | CVE-2026-17991İstismar yok | Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the rgoogle · chrome · CWE-20 | Kritik9,6 | — | %0,3 | 29 Tem 2026 |
28İzleyin | CVE-2026-17993İstismar yok | Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious google · chrome · CWE-362 | Yüksek7,0 | — | %0,0 | 29 Tem 2026 |
32İzleyin | CVE-2026-17995İstismar yok | Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a cgoogle · chrome · CWE-125 | Yüksek8,1 | — | %0,3 | 29 Tem 2026 |
38İzleyin | CVE-2026-18002İstismar yok | Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromigoogle · chrome · CWE-20 | Kritik9,6 | — | %0,3 | 29 Tem 2026 |
35İzleyin | CVE-2026-18012İstismar yok | Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a google · chrome · CWE-416 | Yüksek8,8 | — | %0,3 | 29 Tem 2026 |
38İzleyin | CVE-2026-18015İstismar yok | Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbgoogle · chrome · CWE-693 | Kritik9,6 | — | %0,3 | 29 Tem 2026 |
35İzleyin | CVE-2026-18017İstismar yok | Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crgoogle · chrome · CWE-416 | Yüksek8,8 | — | %0,4 | 29 Tem 2026 |
39İzleyin | CVE-2025-65340İstismar yok | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.CWE-89 | Kritik9,8 | — | %0,3 | 29 Tem 2026 |
28İzleyin | CVE-2026-15929İstismar yok | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Ilg electronics · smartshare · CWE-89 | Yüksek7,1 | — | %0,2 | 29 Tem 2026 |
29İzleyin | CVE-2026-16727İstismar yok | Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows a local user to exeasus · armoury crate · CWE-362 | Yüksek7,3 | — | %0,1 | 29 Tem 2026 |
39İzleyin | CVE-2025-67403İstismar yok | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_class.php via the parameter class_name.CWE-89 | Kritik9,8 | — | %0,3 | 29 Tem 2026 |
39İzleyin | CVE-2025-67404İstismar yok | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and stCWE-89 | Kritik9,8 | — | %0,3 | 29 Tem 2026 |
29İzleyin | CVE-2025-67405İstismar yok | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_password.php via the parameter new_password.CWE-89 | Yüksek7,3 | — | %0,2 | 29 Tem 2026 |
29İzleyin | CVE-2025-67407İstismar yok | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_student.php via parameters fname and student_cCWE-89 | Yüksek7,3 | — | %0,2 | 29 Tem 2026 |
29İzleyin | CVE-2025-67408İstismar yok | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /save_user.php via the parameter status.CWE-89 | Yüksek7,3 | — | %0,2 | 29 Tem 2026 |
39İzleyin | CVE-2025-69942İstismar yok | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1.CWE-89 | Kritik9,8 | — | %0,3 | 29 Tem 2026 |
39İzleyin | CVE-2025-69943İstismar yok | kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and specilizationid.CWE-89 | Kritik9,8 | — | %0,3 | 29 Tem 2026 |
29İzleyin | CVE-2025-69944İstismar yok | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter.CWE-89 | Yüksek7,3 | — | %0,2 | 29 Tem 2026 |
29İzleyin | CVE-2025-69945İstismar yok | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.CWE-89 | Yüksek7,3 | — | %0,2 | 29 Tem 2026 |
29İzleyin | CVE-2025-69949İstismar yok | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.CWE-89 | Yüksek7,3 | — | %0,2 | 29 Tem 2026 |
28İzleyin | CVE-2026-18186İstismar yok | A stored format string vulnerability was found in the FTP Backup on the ADMasustor · data master · CWE-134 | Yüksek7,1 | — | %0,4 | 29 Tem 2026 |
28İzleyin | CVE-2026-18187İstismar yok | A format string vulnerability was found in the Internal Backup on the ADMasustor · data master · CWE-134 | Yüksek7,1 | — | %0,4 | 29 Tem 2026 |
28İzleyin | CVE-2026-18188İstismar yok | A format string vulnerability was found in the Rsync Backup on the ADMasustor · data master · CWE-134 | Yüksek7,1 | — | %0,4 | 29 Tem 2026 |
34İzleyin | CVE-2026-48448İstismar yok | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)adobe · campaign · CWE-89 | Yüksek8,6 | — | %0,5 | 29 Tem 2026 |
39İzleyin | CVE-2026-48449İstismar yok | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)adobe · campaign · CWE-863 | Kritik9,8 | — | %0,8 | 29 Tem 2026 |
34İzleyin | CVE-2026-67244İstismar yok | A format string vulnerability was found in the Notification OAuth settings of ADMasustor · data master · CWE-134 | Yüksek8,6 | — | %0,4 | 29 Tem 2026 |
35İzleyin | CVE-2026-14356İstismar yok | FleekDash V2 <= 2.6.2.2 - Missing Authorization to Authenticated (Subscriber+) Administrator Account Takeover via /users/{id} REST Endpointfleekdash · fleekdash v2 · CWE-862 | Yüksek8,8 | — | %0,4 | 30 Tem 2026 |
39İzleyin | CVE-2026-16610İstismar yok | Admin and Site Enhancements (ASE) Pro <= 8.9.0 - Unauthenticated Remote Code Execution via PHP Code Injection via cfgroup[input] Repeater Row Keyase · admin and site enhancements (ase) pro · CWE-434 | Kritik9,8 | — | %1,0 | 30 Tem 2026 |
30İzleyin | CVE-2026-1360İstismar yok | BuddyPress <= 14.5.0 - Authenticated (Subscriber+) PHP Object Injection via XProfile Field Databuddypress · buddypress · CWE-502 | Yüksek7,5 | — | %1,1 | 30 Tem 2026 |
28İzleyin | CVE-2026-67245İstismar yok | A path traversal vulnerability was found in the VPN Clients on the ADMasustor · data master · CWE-22 | Yüksek7,0 | — | %0,3 | 30 Tem 2026 |
28İzleyin | CVE-2026-67247İstismar yok | A path traversal vulnerability was found in the IHM Log handling of ADMasustor · data master · CWE-22 | Yüksek7,1 | — | %0,4 | 30 Tem 2026 |
34İzleyin | CVE-2026-67248İstismar yok | A stack-based buffer overflow vulnerability was found in the File Explorer on the ADMasustor · data master · CWE-121 | Yüksek8,7 | — | %0,4 | 30 Tem 2026 |
30İzleyin | CVE-2026-12500İstismar yok | WP Travel Engine < 6.8.2 - Unauthenticated Trip Difficulty Level Option Updateunknown · wp travel engine · CWE-862 | Yüksek7,5 | — | %0,3 | 30 Tem 2026 |
30İzleyin | CVE-2026-12687İstismar yok | ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group IDunknown · profilegrid · CWE-269 | Yüksek7,5 | — | %0,4 | 30 Tem 2026 |
30İzleyin | CVE-2026-13178İstismar yok | Eventin < 4.1.16 - Unauthenticated Payment Bypass via Order Status Manipulationunknown · eventin · CWE-639 | Yüksek7,5 | — | %0,3 | 30 Tem 2026 |
34İzleyin | CVE-2026-13395İstismar yok | Bookly < 27.8 - Unauthenticated SQL Injection via staff_idunknown · online scheduling and appointment booking system · CWE-89 | Yüksek8,6 | — | %0,4 | 30 Tem 2026 |
28İzleyin | CVE-2026-14239İstismar yok | Tourmaster < 5.4.8 - Stored XSS via CSRFunknown · tourmaster · CWE-79 | Yüksek7,1 | — | %0,1 | 30 Tem 2026 |
36İzleyin | CVE-2026-14602İstismar yok | Remote API <= 0.2 - Unauthenticated PHP Object Injection via remote-api Query Parameterunknown · remote api · CWE-94 | Kritik9,0 | — | %0,6 | 30 Tem 2026 |
30İzleyin | CVE-2026-15240İstismar yok | Customer Switching for WooCommerce < 2.1.3 - Customer+ Privilege Escalation to Administrator via Insecure Operator Resolutionunknown · customer switching · CWE-287 | Yüksek7,5 | — | %0,3 | 30 Tem 2026 |
32İzleyin | CVE-2026-47858Kavram kanıtı | live information startup mode is vulnerable for remote code executionbroadcom · spring tools · CWE-306 | Yüksek8,0 | — | %0,3 | 30 Tem 2026 |
33İzleyin | CVE-2026-58043İstismar yok | A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries.nodejs · node.js · CWE-284 | Yüksek8,4 | — | %0,1 | 30 Tem 2026 |
39İzleyin | CVE-2026-58046İstismar yok | Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrawebpros · plesk · CWE-89 | Kritik9,9 | — | %0,5 | 30 Tem 2026 |
39İzleyin | CVE-2026-58066İstismar yok | Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML signatures but did nrocket.chat · rocket.chat · CWE-287 | Kritik9,8 | — | %0,3 | 30 Tem 2026 |
28İzleyin | CVE-2026-13584İstismar yok | Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocolmitsubishi electric corporation · melsec mx controller mx-r model mxr300-16 · CWE-924 | Yüksek7,1 | — | %0,1 | 30 Tem 2026 |
37İzleyin | CVE-2026-44090İstismar yok | Missing authentication for MQTT Brokerphoenix contact · charx sec-3150 · CWE-306 | Kritik9,3 | — | %0,7 | 30 Tem 2026 |
35İzleyin | CVE-2026-44091İstismar yok | Creation of a new configuration by posting a malicious ID to MQTTphoenix contact · charx sec-3150 · CWE-501 | Yüksek8,8 | — | %0,5 | 30 Tem 2026 |
35İzleyin | CVE-2026-44092İstismar yok | Missing input validation / stripping of CRLF characters in SystemConfigManagerphoenix contact · charx sec-3150 · CWE-93 | Yüksek8,8 | — | %0,6 | 30 Tem 2026 |
34İzleyin | CVE-2026-44093İstismar yok | Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start scriptphoenix contact · charx sec-3150 · CWE-78 | Yüksek8,5 | — | %0,1 | 30 Tem 2026 |
33İzleyin | CVE-2026-44094İstismar yok | Fallback to second RAUC slot with default credentialsphoenix contact · charx sec-3150 · CWE-636 | Yüksek8,3 | — | %0,4 | 30 Tem 2026 |
34İzleyin | CVE-2026-44095İstismar yok | Local Privilege Escalation via Network scriptsphoenix contact · charx sec-3150 · CWE-78 | Yüksek8,5 | — | %0,1 | 30 Tem 2026 |
34İzleyin | CVE-2026-44096İstismar yok | udhcpc Privilege Escalationphoenix contact · charx sec-3150 · CWE-78 | Yüksek8,5 | — | %0,1 | 30 Tem 2026 |
35İzleyin | CVE-2026-44098İstismar yok | OS Command Injection in OCPP Agent via charge_box_idphoenix contact · charx sec-3150 · CWE-78 | Yüksek8,8 | — | %1,6 | 30 Tem 2026 |
34İzleyin | CVE-2026-44099İstismar yok | Local Privilege Escalation via pppd password injectionphoenix contact · charx sec-3150 · CWE-78 | Yüksek8,5 | — | %0,1 | 30 Tem 2026 |
35İzleyin | CVE-2026-44100İstismar yok | JupiCore charging point reconfiguration without authphoenix contact · charx sec-3150 · CWE-306 | Yüksek8,8 | — | %0,4 | 30 Tem 2026 |
37İzleyin | CVE-2026-44101İstismar yok | OCPP reconfiguration vulnerabilityphoenix contact · charx sec-3150 · CWE-306 | Kritik9,3 | — | %0,7 | 30 Tem 2026 |
37İzleyin | CVE-2026-44104İstismar yok | ControllerAgent does not perform validation of firmwarephoenix contact · charx sec-3150 · CWE-347 | Kritik9,3 | — | %0,4 | 30 Tem 2026 |
34İzleyin | CVE-2026-44106İstismar yok | Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website filephoenix contact · charx sec-3150 · CWE-78 | Yüksek8,5 | — | %0,1 | 30 Tem 2026 |
34İzleyin | CVE-2026-44107İstismar yok | Exposed Reboot via Modbusphoenix contact · charx sec-3150 · CWE-749 | Yüksek8,7 | — | %0,5 | 30 Tem 2026 |
37İzleyin | CVE-2026-44108İstismar yok | Firewall bypass during shutdownphoenix contact · charx sec-3150 · CWE-696 | Kritik9,3 | — | %0,8 | 30 Tem 2026 |
37İzleyin | CVE-2026-7849İstismar yok | Command Injection in SCM (idledisconnect parameter)phoenix contact · charx sec-3150 · CWE-77 | Kritik9,3 | — | %0,7 | 30 Tem 2026 |
35İzleyin | CVE-2026-18353İstismar yok | Unauthenticated SSRF in PIA via OIDC issuer allowlist bypasseclipse foundation · eclipse csi - pia · CWE-918 | Yüksek8,8 | — | %0,4 | 30 Tem 2026 |
30İzleyin | CVE-2026-16969İstismar yok | DFIR-IRIS Stored XSS in Assetsdfir-iris · iris-web · CWE-79 | Yüksek7,6 | — | %0,2 | 30 Tem 2026 |
30İzleyin | CVE-2026-18360İstismar yok | DFIR-IRIS Stored XSS in Custom Attributesdfir-iris · iris-web · CWE-79 | Yüksek7,6 | — | %0,2 | 30 Tem 2026 |
30İzleyin | CVE-2026-18361İstismar yok | DFIR-IRIS Stored XSS in Datastore Uploaddfir-iris · iris-web · CWE-79 | Yüksek7,6 | — | %0,2 | 30 Tem 2026 |
31İzleyin | CVE-2026-16524İstismar yok | Pcp: pcp linux_sockets pmda: arbitrary command execution via command injectionred hat · red hat enterprise linux 10 · CWE-78 | Yüksek7,8 | — | %0,7 | 30 Tem 2026 |
35İzleyin | CVE-2026-16526İstismar yok | Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerabilityred hat · red hat enterprise linux 10 · CWE-403 | Yüksek8,8 | — | %0,5 | 30 Tem 2026 |
29İzleyin | CVE-2026-16527İstismar yok | Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rulesred hat · red hat enterprise linux 10 · CWE-306 | Yüksek7,3 | — | %0,5 | 30 Tem 2026 |
30İzleyin | CVE-2026-16529İstismar yok | Pcp: pcp: denial of service due to signed integer overflowred hat · red hat enterprise linux 10 · CWE-190 | Yüksek7,5 | — | %0,4 | 30 Tem 2026 |
32İzleyin | CVE-2026-47873İstismar yok | Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfacesbroadcom · spring tools · CWE-1327 | Yüksek8,0 | — | %0,2 | 30 Tem 2026 |
33İzleyin | CVE-2026-47882İstismar yok | Spring Boot DevTools remote secret generated with a non-cryptographic PRNGbroadcom · spring tools · CWE-338 | Yüksek8,3 | — | %0,2 | 30 Tem 2026 |
36İzleyin | CVE-2026-18363İstismar yok | Weak password recovery mechanism in osTicket by Enhancesoft LLCenhancesoft llc · osticket · CWE-640 | Kritik9,1 | — | %0,4 | 30 Tem 2026 |
34İzleyin | CVE-2026-22620İstismar yok | Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote aeaton · padm · CWE-89 | Yüksek8,6 | — | %0,6 | 30 Tem 2026 |
33İzleyin | CVE-2026-22621İstismar yok | Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticatedeaton · padm · CWE-78 | Yüksek8,3 | — | %0,5 | 30 Tem 2026 |
35İzleyin | CVE-2026-22622İstismar yok | Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticatedeaton · padm · CWE-78 | Yüksek8,8 | — | %0,5 | 30 Tem 2026 |
28İzleyin | CVE-2026-15397İstismar yok | Subscriptions for WooCommerce <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuwpswings · subscriptions for woocommerce · CWE-862 | Yüksek7,2 | — | %0,5 | 30 Tem 2026 |
32İzleyin | CVE-2026-17543Kavram kanıtı | SQL injection in ext-pgsql via E'...' backslash breakoutphp · php · CWE-89 | Yüksek8,1 | — | %0,3 | 30 Tem 2026 |
32İzleyin | CVE-2026-17544Kavram kanıtı | Out-of-bounds write in bccomp() via crafted operand and scalephp · php · CWE-787 | Yüksek8,1 | — | %0,4 | 30 Tem 2026 |
30İzleyin | CVE-2026-41703İstismar yok | Out-of-bounds read vulnerabilityvmware · cloud foundation · CWE-125 | Yüksek7,6 | — | %0,4 | 30 Tem 2026 |
37İzleyin | CVE-2026-47876İstismar yok | VMXNET3 out-of-bounds write vulnerabilityvmware · cloud foundation · CWE-787 | Kritik9,3 | — | %0,1 | 30 Tem 2026 |
37İzleyin | CVE-2026-54363İstismar yok | CentreStack < 17.5 Hardcoded Key Token Forgery RCEgladinet · centrestack · CWE-321 | Kritik9,3 | — | %0,6 | 30 Tem 2026 |
34İzleyin | CVE-2026-54365İstismar yok | CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dllgladinet · centrestack · CWE-306 | Yüksek8,7 | — | %0,3 | 30 Tem 2026 |
34İzleyin | CVE-2026-54366İstismar yok | CentreStack < 17.4 XXE via SharePoint Storage Configurationgladinet · centrestack · CWE-611 | Yüksek8,7 | — | %0,4 | 30 Tem 2026 |
35İzleyin | CVE-2026-54367İstismar yok | CentreStack < 17.2 Unauthenticated API Authorization Bypassgladinet · centrestack · CWE-306 | Yüksek8,8 | — | %0,3 | 30 Tem 2026 |
34İzleyin | CVE-2026-54368İstismar yok | CentreStack < 17.4 SQL Injection via x-glad-filter Headergladinet · centrestack · CWE-89 | Yüksek8,7 | — | %0,7 | 30 Tem 2026 |
39İzleyin | CVE-2026-59309İstismar yok | vCenter authentication-bypass vulnerabilityvmware · vcenter server · CWE-303 | Kritik9,8 | — | %0,6 | 30 Tem 2026 |
70Bu hafta | CVE-2026-59310Silahlaştırılmış | vCenter directory-traversal vulnerabilityvmware · vcenter server · CWE-22 | Kritik9,8 | KEV | %2,5 | 30 Tem 2026 |
32İzleyin | CVE-2026-12722İstismar yok | Authentication Bypass in FTC Software's E-Commerce Management Panelftc software it services · ftc e-commerce management panel · CWE-306 | Yüksek8,2 | — | %0,4 | 30 Tem 2026 |
32İzleyin | CVE-2026-56428İstismar yok | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default conbosch · bsh elp (electronic platform) modules · CWE-286 | Yüksek8,1 | — | %0,4 | 30 Tem 2026 |
30İzleyin | CVE-2026-57859İstismar yok | e107 Second-Order Code Execution via eval()-Based Deserialization in e_array::unserialize()e107inc · e107 · CWE-502 | Yüksek7,7 | — | %0,6 | 30 Tem 2026 |
33İzleyin | CVE-2026-5219İstismar yok | CSRF in Softtr's E-Commerce Packsofttr information technology trade ltd. co. · e-commerce pack · CWE-352 | Yüksek8,3 | — | %0,1 | 30 Tem 2026 |
30İzleyin | CVE-2026-60074İstismar yok | Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in checkCWE-1289 | Yüksek7,5 | — | %0,6 | 30 Tem 2026 |
30İzleyin | CVE-2026-60075İstismar yok | Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_timeCWE-1333 | Yüksek7,5 | — | %0,3 | 30 Tem 2026 |
34İzleyin | CVE-2026-67351İstismar yok | Serendipity < 2.6.1 Authentication Bypass via Username Collisions9y · serendipity · CWE-304 | Yüksek8,7 | — | %0,5 | 30 Tem 2026 |
37İzleyin | CVE-2026-11707İstismar yok | Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manageribm · websphere application server · CWE-79 | Kritik9,3 | — | %0,3 | 30 Tem 2026 |
30İzleyin | CVE-2026-11897İstismar yok | IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2ibm · websphere application server · CWE-770 | Yüksek7,5 | — | %0,5 | 30 Tem 2026 |
- CVE-2026-1797135İzleyin
Inappropriate implementation in Frame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform out of bounds
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1797930İzleyin
Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML p
YüksekCVSS 7,5İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1798738İzleyin
Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compro
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1798935İzleyin
Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1799038İzleyin
Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1799138İzleyin
Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the r
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1799328İzleyin
Race in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via a malicious
YüksekCVSS 7,0İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1799532İzleyin
Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of bounds memory read via a c
YüksekCVSS 8,1İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1800238İzleyin
Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromi
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1801235İzleyin
Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1801538İzleyin
Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandb
KritikCVSS 9,6İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2026-1801735İzleyin
Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a cr
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome29 Tem 2026
- CVE-2025-6534039İzleyin
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php.
KritikCVSS 9,8İstismar yokEPSS %029 Tem 2026
- CVE-2026-1592928İzleyin
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL I
YüksekCVSS 7,1İstismar yokEPSS %0lg electronics · smartshare29 Tem 2026
- CVE-2026-1672729İzleyin
Concurrent Execution using Shared Resource with Improper Synchronization (“Race Condition”) in ASUS Armoury Crate allows a local user to exe
YüksekCVSS 7,3İstismar yokEPSS %0asus · armoury crate29 Tem 2026
- CVE-2025-6740339İzleyin
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_class.php via the parameter class_name.
KritikCVSS 9,8İstismar yokEPSS %029 Tem 2026
- CVE-2025-6740439İzleyin
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and st
KritikCVSS 9,8İstismar yokEPSS %029 Tem 2026
- CVE-2025-6740529İzleyin
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_password.php via the parameter new_password.
YüksekCVSS 7,3İstismar yokEPSS %029 Tem 2026
- CVE-2025-6740729İzleyin
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_student.php via parameters fname and student_c
YüksekCVSS 7,3İstismar yokEPSS %029 Tem 2026
- CVE-2025-6740829İzleyin
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /save_user.php via the parameter status.
YüksekCVSS 7,3İstismar yokEPSS %029 Tem 2026
- CVE-2025-6994239İzleyin
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1.
KritikCVSS 9,8İstismar yokEPSS %029 Tem 2026
- CVE-2025-6994339İzleyin
kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and specilizationid.
KritikCVSS 9,8İstismar yokEPSS %029 Tem 2026
- CVE-2025-6994429İzleyin
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in the view-medhistory.php endpoint via the viewid parameter.
YüksekCVSS 7,3İstismar yokEPSS %029 Tem 2026
- CVE-2025-6994529İzleyin
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1.
YüksekCVSS 7,3İstismar yokEPSS %029 Tem 2026
- CVE-2025-6994929İzleyin
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in check_availability.php via the parameters emailid and email.
YüksekCVSS 7,3İstismar yokEPSS %029 Tem 2026
- CVE-2026-1818628İzleyin
A stored format string vulnerability was found in the FTP Backup on the ADM
YüksekCVSS 7,1İstismar yokEPSS %0asustor · data master29 Tem 2026
- CVE-2026-1818728İzleyin
A format string vulnerability was found in the Internal Backup on the ADM
YüksekCVSS 7,1İstismar yokEPSS %0asustor · data master29 Tem 2026
- CVE-2026-1818828İzleyin
A format string vulnerability was found in the Rsync Backup on the ADM
YüksekCVSS 7,1İstismar yokEPSS %0asustor · data master29 Tem 2026
- CVE-2026-4844834İzleyin
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
YüksekCVSS 8,6İstismar yokEPSS %0adobe · campaign29 Tem 2026
- CVE-2026-4844939İzleyin
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
KritikCVSS 9,8İstismar yokEPSS %0adobe · campaign29 Tem 2026
- CVE-2026-6724434İzleyin
A format string vulnerability was found in the Notification OAuth settings of ADM
YüksekCVSS 8,6İstismar yokEPSS %0asustor · data master29 Tem 2026
- CVE-2026-1435635İzleyin
FleekDash V2 <= 2.6.2.2 - Missing Authorization to Authenticated (Subscriber+) Administrator Account Takeover via /users/{id} REST Endpoint
YüksekCVSS 8,8İstismar yokEPSS %0fleekdash · fleekdash v230 Tem 2026
- CVE-2026-1661039İzleyin
Admin and Site Enhancements (ASE) Pro <= 8.9.0 - Unauthenticated Remote Code Execution via PHP Code Injection via cfgroup[input] Repeater Row Key
KritikCVSS 9,8İstismar yokEPSS %1ase · admin and site enhancements (ase) pro30 Tem 2026
- CVE-2026-136030İzleyin
BuddyPress <= 14.5.0 - Authenticated (Subscriber+) PHP Object Injection via XProfile Field Data
YüksekCVSS 7,5İstismar yokEPSS %1buddypress · buddypress30 Tem 2026
- CVE-2026-6724528İzleyin
A path traversal vulnerability was found in the VPN Clients on the ADM
YüksekCVSS 7,0İstismar yokEPSS %0asustor · data master30 Tem 2026
- CVE-2026-6724728İzleyin
A path traversal vulnerability was found in the IHM Log handling of ADM
YüksekCVSS 7,1İstismar yokEPSS %0asustor · data master30 Tem 2026
- CVE-2026-6724834İzleyin
A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM
YüksekCVSS 8,7İstismar yokEPSS %0asustor · data master30 Tem 2026
- CVE-2026-1250030İzleyin
WP Travel Engine < 6.8.2 - Unauthenticated Trip Difficulty Level Option Update
YüksekCVSS 7,5İstismar yokEPSS %0unknown · wp travel engine30 Tem 2026
- CVE-2026-1268730İzleyin
ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID
YüksekCVSS 7,5İstismar yokEPSS %0unknown · profilegrid30 Tem 2026
- CVE-2026-1317830İzleyin
Eventin < 4.1.16 - Unauthenticated Payment Bypass via Order Status Manipulation
YüksekCVSS 7,5İstismar yokEPSS %0unknown · eventin30 Tem 2026
- CVE-2026-1339534İzleyin
Bookly < 27.8 - Unauthenticated SQL Injection via staff_id
YüksekCVSS 8,6İstismar yokEPSS %0unknown · online scheduling and appointment booking system30 Tem 2026
- CVE-2026-1423928İzleyin
Tourmaster < 5.4.8 - Stored XSS via CSRF
YüksekCVSS 7,1İstismar yokEPSS %0unknown · tourmaster30 Tem 2026
- CVE-2026-1460236İzleyin
Remote API <= 0.2 - Unauthenticated PHP Object Injection via remote-api Query Parameter
KritikCVSS 9,0İstismar yokEPSS %0unknown · remote api30 Tem 2026
- CVE-2026-1524030İzleyin
Customer Switching for WooCommerce < 2.1.3 - Customer+ Privilege Escalation to Administrator via Insecure Operator Resolution
YüksekCVSS 7,5İstismar yokEPSS %0unknown · customer switching30 Tem 2026
- CVE-2026-4785832İzleyin
live information startup mode is vulnerable for remote code execution
YüksekCVSS 8,0Kavram kanıtıEPSS %0broadcom · spring tools30 Tem 2026
- CVE-2026-5804333İzleyin
A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries.
YüksekCVSS 8,4İstismar yokEPSS %0nodejs · node.js30 Tem 2026
- CVE-2026-5804639İzleyin
Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitra
KritikCVSS 9,9İstismar yokEPSS %0webpros · plesk30 Tem 2026
- CVE-2026-5806639İzleyin
Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML signatures but did n
KritikCVSS 9,8İstismar yokEPSS %0rocket.chat · rocket.chat30 Tem 2026
- CVE-2026-1358428İzleyin
Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol
YüksekCVSS 7,1İstismar yokEPSS %0mitsubishi electric corporation · melsec mx controller mx-r model mxr300-1630 Tem 2026
- CVE-2026-4409037İzleyin
Missing authentication for MQTT Broker
KritikCVSS 9,3İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4409135İzleyin
Creation of a new configuration by posting a malicious ID to MQTT
YüksekCVSS 8,8İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4409235İzleyin
Missing input validation / stripping of CRLF characters in SystemConfigManager
YüksekCVSS 8,8İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4409334İzleyin
Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script
YüksekCVSS 8,5İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4409433İzleyin
Fallback to second RAUC slot with default credentials
YüksekCVSS 8,3İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4409534İzleyin
Local Privilege Escalation via Network scripts
YüksekCVSS 8,5İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4409634İzleyin
udhcpc Privilege Escalation
YüksekCVSS 8,5İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4409835İzleyin
OS Command Injection in OCPP Agent via charge_box_id
YüksekCVSS 8,8İstismar yokEPSS %1phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4409934İzleyin
Local Privilege Escalation via pppd password injection
YüksekCVSS 8,5İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4410035İzleyin
JupiCore charging point reconfiguration without auth
YüksekCVSS 8,8İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4410137İzleyin
OCPP reconfiguration vulnerability
KritikCVSS 9,3İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4410437İzleyin
ControllerAgent does not perform validation of firmware
KritikCVSS 9,3İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4410634İzleyin
Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file
YüksekCVSS 8,5İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4410734İzleyin
Exposed Reboot via Modbus
YüksekCVSS 8,7İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-4410837İzleyin
Firewall bypass during shutdown
KritikCVSS 9,3İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-784937İzleyin
Command Injection in SCM (idledisconnect parameter)
KritikCVSS 9,3İstismar yokEPSS %0phoenix contact · charx sec-315030 Tem 2026
- CVE-2026-1835335İzleyin
Unauthenticated SSRF in PIA via OIDC issuer allowlist bypass
YüksekCVSS 8,8İstismar yokEPSS %0eclipse foundation · eclipse csi - pia30 Tem 2026
- CVE-2026-1696930İzleyin
DFIR-IRIS Stored XSS in Assets
YüksekCVSS 7,6İstismar yokEPSS %0dfir-iris · iris-web30 Tem 2026
- CVE-2026-1836030İzleyin
DFIR-IRIS Stored XSS in Custom Attributes
YüksekCVSS 7,6İstismar yokEPSS %0dfir-iris · iris-web30 Tem 2026
- CVE-2026-1836130İzleyin
DFIR-IRIS Stored XSS in Datastore Upload
YüksekCVSS 7,6İstismar yokEPSS %0dfir-iris · iris-web30 Tem 2026
- CVE-2026-1652431İzleyin
Pcp: pcp linux_sockets pmda: arbitrary command execution via command injection
YüksekCVSS 7,8İstismar yokEPSS %0red hat · red hat enterprise linux 1030 Tem 2026
- CVE-2026-1652635İzleyin
Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0red hat · red hat enterprise linux 1030 Tem 2026
- CVE-2026-1652729İzleyin
Pcp: pcp pmproxy: unauthenticated access to /store endpoint allows bypassing pmcd access rules
YüksekCVSS 7,3İstismar yokEPSS %0red hat · red hat enterprise linux 1030 Tem 2026
- CVE-2026-1652930İzleyin
Pcp: pcp: denial of service due to signed integer overflow
YüksekCVSS 7,5İstismar yokEPSS %0red hat · red hat enterprise linux 1030 Tem 2026
- CVE-2026-4787332İzleyin
Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces
YüksekCVSS 8,0İstismar yokEPSS %0broadcom · spring tools30 Tem 2026
- CVE-2026-4788233İzleyin
Spring Boot DevTools remote secret generated with a non-cryptographic PRNG
YüksekCVSS 8,3İstismar yokEPSS %0broadcom · spring tools30 Tem 2026
- CVE-2026-1836336İzleyin
Weak password recovery mechanism in osTicket by Enhancesoft LLC
KritikCVSS 9,1İstismar yokEPSS %0enhancesoft llc · osticket30 Tem 2026
- CVE-2026-2262034İzleyin
Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote a
YüksekCVSS 8,6İstismar yokEPSS %0eaton · padm30 Tem 2026
- CVE-2026-2262133İzleyin
Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an authenticated
YüksekCVSS 8,3İstismar yokEPSS %0eaton · padm30 Tem 2026
- CVE-2026-2262235İzleyin
Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated
YüksekCVSS 8,8İstismar yokEPSS %0eaton · padm30 Tem 2026
- CVE-2026-1539728İzleyin
Subscriptions for WooCommerce <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configu
YüksekCVSS 7,2İstismar yokEPSS %0wpswings · subscriptions for woocommerce30 Tem 2026
- CVE-2026-1754332İzleyin
SQL injection in ext-pgsql via E'...' backslash breakout
YüksekCVSS 8,1Kavram kanıtıEPSS %0php · php30 Tem 2026
- CVE-2026-1754432İzleyin
Out-of-bounds write in bccomp() via crafted operand and scale
YüksekCVSS 8,1Kavram kanıtıEPSS %0php · php30 Tem 2026
- CVE-2026-4170330İzleyin
Out-of-bounds read vulnerability
YüksekCVSS 7,6İstismar yokEPSS %0vmware · cloud foundation30 Tem 2026
- CVE-2026-4787637İzleyin
VMXNET3 out-of-bounds write vulnerability
KritikCVSS 9,3İstismar yokEPSS %0vmware · cloud foundation30 Tem 2026
- CVE-2026-5436337İzleyin
CentreStack < 17.5 Hardcoded Key Token Forgery RCE
KritikCVSS 9,3İstismar yokEPSS %0gladinet · centrestack30 Tem 2026
- CVE-2026-5436534İzleyin
CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll
YüksekCVSS 8,7İstismar yokEPSS %0gladinet · centrestack30 Tem 2026
- CVE-2026-5436634İzleyin
CentreStack < 17.4 XXE via SharePoint Storage Configuration
YüksekCVSS 8,7İstismar yokEPSS %0gladinet · centrestack30 Tem 2026
- CVE-2026-5436735İzleyin
CentreStack < 17.2 Unauthenticated API Authorization Bypass
YüksekCVSS 8,8İstismar yokEPSS %0gladinet · centrestack30 Tem 2026
- CVE-2026-5436834İzleyin
CentreStack < 17.4 SQL Injection via x-glad-filter Header
YüksekCVSS 8,7İstismar yokEPSS %0gladinet · centrestack30 Tem 2026
- CVE-2026-5930939İzleyin
vCenter authentication-bypass vulnerability
KritikCVSS 9,8İstismar yokEPSS %0vmware · vcenter server30 Tem 2026
- CVE-2026-5931070Bu hafta
vCenter directory-traversal vulnerability
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %2vmware · vcenter server30 Tem 2026
- CVE-2026-1272232İzleyin
Authentication Bypass in FTC Software's E-Commerce Management Panel
YüksekCVSS 8,2İstismar yokEPSS %0ftc software it services · ftc e-commerce management panel30 Tem 2026
- CVE-2026-5642832İzleyin
The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default con
YüksekCVSS 8,1İstismar yokEPSS %0bosch · bsh elp (electronic platform) modules30 Tem 2026
- CVE-2026-5785930İzleyin
e107 Second-Order Code Execution via eval()-Based Deserialization in e_array::unserialize()
YüksekCVSS 7,7İstismar yokEPSS %0e107inc · e10730 Tem 2026
- CVE-2026-521933İzleyin
CSRF in Softtr's E-Commerce Pack
YüksekCVSS 8,3İstismar yokEPSS %0softtr information technology trade ltd. co. · e-commerce pack30 Tem 2026
- CVE-2026-6007430İzleyin
Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check
YüksekCVSS 7,5İstismar yokEPSS %030 Tem 2026
- CVE-2026-6007530İzleyin
Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in _parse_time
YüksekCVSS 7,5İstismar yokEPSS %030 Tem 2026
- CVE-2026-6735134İzleyin
Serendipity < 2.6.1 Authentication Bypass via Username Collision
YüksekCVSS 8,7İstismar yokEPSS %0s9y · serendipity30 Tem 2026
- CVE-2026-1170737İzleyin
Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager
KritikCVSS 9,3İstismar yokEPSS %0ibm · websphere application server30 Tem 2026
- CVE-2026-1189730İzleyin
IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2
YüksekCVSS 7,5İstismar yokEPSS %0ibm · websphere application server30 Tem 2026